8.1

CVE-2023-39349

Exploit

Sentry vulnerable to privilege escalation via ApiTokensEndpoint

Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token with few or no scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on `sentry.io`. For self-hosted users, it is advised to rotate user auth tokens. A fix is available in version 23.7.2 of `sentry` and `self-hosted`. There are no known workarounds.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sentry ≫ Sentry Version >= 22.1.0 < 23.7.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.85% 0.533
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
security-advisories@github.com 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://github.com/getsentry/self-hosted/releases/tag/23.7.2
Release Notes
https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083
Patch
https://github.com/getsentry/sentry/pull/53850
Patch
https://github.com/getsentry/sentry/releases/tag/23.7.2
Release Notes
https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c
Patch
Third Party Advisory
Exploit